SAML (Security Assertion Markup Language) is an authentication standard that lets your employees sign in to JustLogin β and other business applications β using a single set of credentials managed by your company's Identity Provider. With Google Workspace as your Identity Provider, users can click the JustLogin icon from their Google app drawer and be logged in automatically, with no separate username or password required.
This guide walks through two major steps that must both be completed for SSO to work:
- Part 1 β Enable and configure SAML on the JustLogin side (Service Provider).
- Part 2 β Create and configure the JustLogin SAML app in Google Workspace (Identity Provider).
Key Terms
| Term | Description | Example |
|---|---|---|
| Identity Provider (IdP) | Stores and authenticates user credentials, then sends verified identity data to the Service Provider. | Google Workspace, Microsoft Azure AD |
| Service Provider (SP) | The application users want to access; relies on the IdP to confirm identity. | JustLogin, Salesforce, Dropbox |
Important: For SAML to work, every user's JustLogin username must be their email address. This is the only unique identifier the system accepts. If you need help updating usernames, contact support@justlogin.com. |
Part 1 β Enabling SAML on JustLogin (Service Provider)
Complete these steps first to generate the SP details you will need in Part 2.
- Log in to your JustLogin account.
- Go to UserAdmin.
- Click the
tab at the top of the page.
- Select the SSO sub-tab.
- The SAML/SSO setup page will appear:
- Toggle the slider to enable SAML.
- The left column contains your Service Provider (SP) details β these are pre-filled automatically and do not need to be edited. Keep this page open; you will copy values from it in Part 2.
- The right column requires Identity Provider (IdP) data from Google Workspace. You will complete these fields in the steps below after retrieving the information from Google Workspace.
Tip: Keep the JustLogin SSO setup page open in a separate browser tab while you complete Part 2 β you will need to switch back and forth between JustLogin and the Google Workspace Admin console. |
Part 2 β Setting Up JustLogin as a SAML App in Google Workspace
Step A: Create the Custom SAML App in Google Workspace
- Log in to admin.google.com. You must be a Google Workspace administrator for your organisation.
- Click the menu icon in the upper-left corner.
- Navigate to Apps > SAML apps.
- Click Add App.
- Select Add custom SAML app from the dropdown.
-
Fill in the app details:
- App Name β Enter JustLogin.
- App Icon β Optionally upload the JustLogin logo.
- Click Continue.
Step B: Copy IdP Details from Google Workspace into JustLogin
The next page displays your Google Workspace IdP details. You need to copy these into the right column of the JustLogin SSO setup page (Part 1, Step 8).
- Click the copy icon next to the SSO URL and paste it into the corresponding field in JustLogin.
- Click the download icon to download the IdP certificate.
- Switch back to the JustLogin SSO setup page (Part 1, Steps 1β5 to navigate there if needed).
- Paste the SSO URL you copied into the appropriate fields.
-
Click the certificate upload box and upload the certificate you downloaded from Google Workspace.
Note: If the downloaded certificate file has a
.pemextension, rename it to.cerbefore uploading. - A confirmation message will appear once the certificate is successfully uploaded.
- Click
to save your JustLogin SAML configuration. The JustLogin side of the setup is now complete.
Step C: Enter JustLogin SP Details into Google Workspace
Return to the Google Workspace Admin console to finish the configuration there.
- On the Add SAML app page in Google Workspace, click Continue.
- The next page asks for your Service Provider details from JustLogin.
- For the Entity ID field, copy the value from the JustLogin SSO setup page:
Copy from JustLogin:
Paste into Google Workspace: - For the ACS URL field, copy the value from the JustLogin SSO setup page:
Copy from JustLogin:
Paste into Google Workspace: - All remaining fields on this page are optional and can be left blank.
- Click
.
- On the next page, click
to complete the app creation.
Step D: Enable the JustLogin App for Your Users
JustLogin will now appear in your list of SAML apps, but user access is set to OFF for everyone by default. You must enable it before your employees can use SSO.
- Click the JustLogin app entry
.
- The User Access panel will open.
- Click View Details.
- Select ON for everyone (or limit to specific organisational units if preferred).
- Click
to apply the change.
What Your Employees Will Experience
Once the setup is complete and user access is enabled, employees will see the JustLogin icon in their Google app drawer.
Clicking the JustLogin icon will open JustLogin in a new browser tab and log the user in automatically β no separate username or password entry is needed.
Need help? If you encounter any issues during setup, contact our support team at support@justlogin.com. |